RSA Validation List

Last Update: 10/7/2008

Overview

These implementations are validated as conforming to the RSA as approved in FIPS 186-2, Digital Signature Standard (DSS) and specified in ANSI X9.31-1998, Digital Signature using Reversible Public Key Cryptography for the Financial Services Industry (rDSA) and/or as approved in PKCS#1 v2.1: RSA Cryptography Standard, RSA Laboratories, June 2002, using tests described in The RSA Validation System (RSAVS) User's Guide. The testing Is handled by NVLAP-accredited Cryptographic Module Testing (CMT) laboratories.

NIST currently supports three different RSA algorithm implementations. One of these algorithms is specified in ANSI X9.31-1998 and is called RSA. The other algorithms are specified in the PKCS #1 v2.1: RSA Cryptography Standard dated June 2002. They are defined as signature schemes with appendix and are called RSASSA-PSS and RSASSA-PKCS1-v1_5.

NIST has made every attempt to provide complete and accurate information about the implementations described in the following list. It is the responsibility of the vendor to notify NIST of any necessary changes to its contact information and implementation description.

In addition to a general description of each product, this list mentions the features that were tested as conforming to the RSA; these features are listed on the validation certificate that is issued to the vendor. The following notation is used to describe the implemented features that were successfully tested.

Legend for Description Field

ALG([ANSI X9.31],[RSASSA-PKCS1_V1_5],[RSASSA-PSS])

RSA validated algorithm(s) implemented as specified in ANSI X9.31-1998 and/or PKCS#1 v2.1, dated June 2002
SIG(gen) Signature Generation
SIG(ver) Signature Verification
MOD( [1024], [1536], [2048], [3072], [4096]) Modulus sizes tested (bits).

SHA([SHA-1], [SHA-224], [SHA-256], [SHA-384], [SHA-512])
Cert.#[number]

Secure Hash Standard supported by the RSA algorithm implementation:

-corresponding SHS certificate number on the SHS Validation List.

The list is in reverse numerical order, by certificate number. Thus, the more recent validations are closer to the top of the list.

RSA Validated Implementations

Cert# Vendor Implementation Operational Environment Val.
Date
Description/Notes
428 Research in Motion
295 Phillip Street
Waterloo, Ontario N2L 3W8
Canada

-Security Certifications Team
TEL: 519-888-7465 x72921
FAX: 519-886-9852

BlackBerry Cryptographic API

Version 4.6 (Firmware)

Intel PXA930 624MHz processor with BlackBerry OS 4.6 10/7/2008

ALG[ANSIX9.31]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , 4096 , SHS: SHA-1Cert#867 Cert# 868 Cert# 868 , SHA-256Cert#867 Cert# 868 , SHA-384Cert#877 , SHA-512Cert#867 Cert# 868

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , SHS: SHA-1Cert#867 Cert# 868 , SHA-224Cert#877 , SHA-256Cert#867 Cert# 868 , SHA-384Cert#877 , SHA-512Cert#867 Cert# 868

ALG[RSASSA-PSS]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , SHS: SHA-1Cert#867 Cert# 868 , SHA-224Cert#877 , SHA-256Cert#867 Cert# 868 , SHA-384Cert#877 , SHA-512Cert#867 Cert# 868

"The BlackBerry Cryptographic API is the firmware module that provides advanced cryptographic functionality to BlackBerry Wireless Handhelds and Smartphones."

1024 is not tested for PKCS#1 1.5Signature Verificate;

427 Virtual Mobile Technologies (Pty) Ltd
Unit 5
The Planet Art
32 Jamieson Street
Cape Town, Western Cape 8001
South Africa

-Carl Meijer
TEL: 27 21 424 7818
FAX: 27 21 424 7818

Mobile Financial Transaction Cryptographic Library (RSA)

Version 2.0

Java ME (J2ME) w/ Sony-Ericsson W380 mobile phone 10/7/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(ver); 1024 , 2048 , 4096 , SHS: SHA-1Cert#876

"VMT's cryptographic library supports random number generation, key transport/wrapping, encryption and authentication. The library is part of a broader SOA integration solution that provides end-to-end web services security for mobile commerce."

426 Secure64 Software Corporation
5600 South Quebec Street
Suite 320D
n/a
Greenwood Village, CO 80111
USA

-Christopher Worley
TEL: (303) 242-5901
FAX: (720) 489-0694

Secure64 Cryptographic Module

Version 1.0

Intel Itanium Processor w/ Secure64's Source T Operating System 10/7/2008 ALG[ANSIX9.31]; Key(gen)(MOD: 1024 , 1536 , 2048 PubKey Values: 3 , 17 , 65537 )
RNG: Cert# 507

ALG[ANSIX9.31]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , SHS: SHA-1Cert#874

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , SHS: SHA-1Cert#874

"The Secure64 Cryptographic Module provides cryptographic services to Secure64 components and applications running on Secure64's SourceT operating system. The cryptographic module is statically linked with the SourceT OS and Secure64 application software by Secure64 to deliver FIPS 140-2 compliant."

425 Certicom Corp.
5520 Explorer Dr., 4th Floor
Mississauga, Ontario L4W 5L1
Canada

-Atsushi Yamada
TEL: 905-501-3884
FAX: 905-5074230

-Randy Tsang
TEL: 905-507-4220
FAX: 905-507-4230

Security Builder GSE Crypto Core

Version 2.4

ARMv7 w/ Maemo Linux 5 10/7/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , SHS: SHA-1Cert#871 , SHA-224Cert#871 , SHA-256Cert#871 , SHA-384Cert#871 , SHA-512Cert#871

ALG[RSASSA-PSS]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , SHS: SHA-1Cert#871 , SHA-224Cert#871 , SHA-256Cert#871 , SHA-384Cert#871 , SHA-512Cert#871

"Security Builder GSE-C provides application developers with cryptographic tools to easily integrate encryption, digital signatures and other security mechanisms into C-based apps for FIPS 140-2 and Suite B security. It can also be used with Certicom's PKI, IPSec, SSL and DRM modules."

424 Gemalto
Austin Arboretum Plaza II 9442
Capital of Texas Hwy North
Suite 4
Austin, TX 78759
USA

-Pedro Martinez
TEL: 512-257-3871
FAX: 512-257-3881

.NET Hardware/Firmware Framework

Version 2.2 (Firmware)

Part # Infineon SLE88CFX4000P

Infineon SLE88CFX4000P 9/29/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 2048 , SHS: SHA-1Cert#869

"Gemalto .NET v2.2 Smart Card Platform implements a subset of the .NET Framework with high end cryptographic capabilities, including Random Number Generation, on Board Key Generation, and encryption and hashing algorithms such as DES, 3DES, AES, SHA, and 2048 bit RSA. The combination of advanced programmability provided by the .NET Framework and the high end security features make .NET v2.2 a perfect support for Enterprise and Government security solutions."

423 Research in Motion
295 Phillip Street
Waterloo, Ontario N2L 3W8
Canada

-Security Certifications Team
TEL: 519-888-7465 x72921
FAX: 519-886-9852

BlackBerry Cryptographic Kernel - AES ASM

Version 3.8.5.42 (Firmware)

Intel PXA930 624MHz processor with BlackBerry OS 4.6 9/29/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(ver); 1024 , SHS: SHA-1Cert#868

"The BlackBerry Cryptographic Kernel is the firmware module that provides the core cryptographic functionality to BlackBerry Wireless Handhelds and Smartphones."

422 Research in Motion
295 Phillip Street
Waterloo, Ontario N2L 3W8
Canada

-Security Certifications Team
TEL: 519-888-7465 x72921
FAX: 519-886-9852

BlackBerry Cryptographic Kernel - AES ASM

Version 3.8.5.48 (Firmware)

Intel PXA930 624MHz processor with BlackBerry OS 4.6 9/29/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(ver); 1024 , SHS: SHA-1Cert#867

"The BlackBerry Cryptographic Kernel is the firmware module that provides the core cryptographic functionality to BlackBerry Wireless Handhelds and Smartphones."

421 Juniper Networks, Inc.
1194 N. Mathilda Ave.
Sunnyvale, CA 94089
USA

-Mike Kouri
TEL: 408-936-8206
FAX: 408-936-8200

SSG 20 RSA

Version ScreenOS 6.2 (Firmware)

Part # SSG-20

Intel IXP625 9/24/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 2048 , SHS: SHA-1Cert#864

"The SSG 20 is a high performance security platform for small branch office and standalone businesses that want to stop internal and external attacks, prevent unauthorized access adn achieve regulatory compliance. The SSG 20 delivers to 160Mbps of stateful firewall traffic and 40 Mbps of IPSec VPN traffic."

420 Juniper Networks, Inc.
1194 N. Mathilda Ave.
Sunnyvale, CA 94089
USA

-Mike Kouri
TEL: 408-936-8206
FAX: 408-936-8200

SSG 140 RSA

Version ScreenOS 6.2 (Firmware)

Part # SSG-140

Intel IXP2325 9/24/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 2048 , SHS: SHA-1Cert#863

"The SSG 140 is a high-performance security platform."

419 Juniper Networks, Inc.
1194 N. Mathilda Ave.
Sunnyvale, CA 94089
USA

-Mike Kouri
TEL: 408-936-8206
FAX: 408-936-8200

SSG 320M/350M RSA

Version ScreenOS 6.2 (Firmware)

Part # SSG-320M/SSG-350M

Intel IXP2325 9/24/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 2048 , SHS: SHA-1Cert#862

"The SSG 300 series is a high-performance security platform."

418 Juniper Networks, Inc.
1194 N. Mathilda Ave.
Sunnyvale, CA 94089
USA

-Mike Kouri
TEL: 408-936-8206
FAX: 408-936-8200

SSG 520M/550M RSA

Version ScreenOS 6.2 (Firmware)

Part # SSG-520M/SSG-550M

Cavium Nitrox Lite 9/24/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 2048 , SHS: SHA-1Cert#861

"The SSG 520M/550M are high-performance security platforms."

417 Juniper Networks, Inc.
1194 N. Mathilda Ave.
Sunnyvale, CA 94089
USA

-Mike Kouri
TEL: 408-936-8206
FAX: 408-936-8200

SSG 5 RSA

Version ScreenOS 6.2 (Firmware)

Part # SSG-5

Intel IXP625 9/24/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 2048 , SHS: SHA-1Cert#860

"The SSG-5 is a high performance security platform for small branch office and standalone businesses that want to stop internal adnexternal attacks, prevent unauthorized access and achieve regulatory compliance. The SSG-5 delivers 160 Mbps of stateful firewall traffic and 40 Mbps of IPSec VPN traffic."

416 Juniper Networks, Inc.
1194 N. Mathilda Ave.
Sunnyvale, CA 94089
USA

-Mike Kouri
TEL: 408-936-8206
FAX: 408-936-8200

NS-5200/NS-5400 RSA

Version ScreenOS 6.2 (Firmware)

Part # NS-5200/NS-5400

Gigascreen 3 9/24/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 2048 , SHS: SHA-1Cert#859

"The NS-5200 and NS-5400 are high-performance security platforms."

415 Juniper Networks, Inc.
1194 N. Mathilda Ave.
Sunnyvale, CA 94089
USA

-Mike Koui
TEL: 408-936-8206
FAX: 408-936-8200

ISG 1000/2000 RSA

Version ScreenOS 6.2 (Firmware)

Part # NSISG-1000/NSISG-2000

Gigascreen 3 9/24/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 2048 , SHS: SHA-1Cert#858

"The ISG 1000 and 2000 are high-performance security platforms."

414 Sun Microsystems
4150 Network Circle
Santa Clara, CA 95054
USA

-Mehdi Bonyadi
TEL: 858-625-5163

Sun Cryptographic Accelerator 6000

Version 1.1.2 (Firmware)

Intel 80333 9/24/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , SHS: SHA-1Cert#857

"Cryptographic Acceleration Card"

413 Blue Coat Systems, Inc.
420 N. Mary Avenue
Sunnyvale, California 94085-4121
USA

-Sasi Murthy
TEL: 408.220.2108
FAX: 408.220.2250

-Sandy Hawke
TEL: 408.220.2136
FAX: 408.220.2012

SGOS Cryptographic Algorithms

Version 1.12.0 (Firmware)

Intel Celeron; Intel Xeon; AMD Opteron; Intel Celeron with Cavium CN1010 Accelerator; Intel Xeon with Cavium CN1010 Accelerator; AMD Opteron with Cavium CN1010 Accelerator; Intel Celeron with Broadcom 5825 Accelerator; Intel Xeon with Broadcom 5825 Accelerator; AMD Opteron with Broadcom 5825 Accelerator 9/11/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , SHS: SHA-1Cert#854

"Cryptographic algorithm implementations for the Blue Coat WAN Application Delivery solutions which "stop the bad and accelerate the good", optimizing application performance and security for any user, anywhere, across the WAN for distributed enterprises. "

412 RSA, The Security Division of EMC
177 Bovet Road, Suite 200
San Mateo, CA 94402
USA

-Kathy Kriese
TEL: 650-931-9781

RSA BSAFE Crypto-C Micro Edition (ME)

Version 3.0.0.1

Intel Celeron w/ Microsoft Windows XP Professional SP2; AMD Athlon X2 w/ Microsoft Windows Vista Ultimate; Intel Celeron w/ Red Hat Enterprise Linux AS 4.0 w/ LSB 3.0.3 9/11/2008 ALG[ANSIX9.31]; Key(gen)(MOD: 1024 , 1536 , 2048 , 3072 , 4096 PubKey Values: 3 , 17 , 65537 )
RNG: Cert# 492

ALG[ANSIX9.31]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , 4096 , SHS: SHA-1Cert#855 , SHA-256Cert#855 , SHA-384Cert#855 , SHA-512Cert#855

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , SHS: SHA-1Cert#855 , SHA-224Cert#855 , SHA-256Cert#855 , SHA-384Cert#855 , SHA-512Cert#855

ALG[RSASSA-PSS]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , SHS: SHA-1Cert#855 , SHA-224Cert#855 , SHA-256Cert#855 , SHA-384Cert#855 , SHA-512Cert#855

"RSA BSAFE® Crypto-C ME software is designed to help protect sensitive data as it is stored using strong encryption techniques to provide a persistent level of protection. The software supports a wide range of industry standard encryption algorithms offering developers the flexibility to choose the appropriate option to meet their requirements."

411 Sun Microsystems
4150 Network Circle
Santa Clara, CA 95054
USA

-Mehdi Bonyadi
TEL: 858-625-5163

Sun Cryptographic Accelerator 6000

Version 1.1.2 (Firmware)

Part # 3753424, Rev. -02 and -03

Intel 80333 9/11/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , SHS: SHA-1Cert#853

"Cryptographic acceleration card"

410 Sun Microsystems
4150 Network Circle
Santa Clara, CA 95054
USA

-Mehdi Bonyadi
TEL: 858-625-5163

Sun Cryptographic Accelerator 6000

Version 1.0.11 (Firmware)

Intel 80333 9/11/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(ver); 1024 , 1536 , 2048 , SHS: SHA-1Cert#850

"Cryptographic Acceleration Card"

409 Sun Microsystems
4150 Network Circle
Santa Clara, CA 95054
USA

-Mehdi Bonyadi
TEL: 858-625-5163

Sun Cryptographic Accelerator 6000

Version 1.0.11 (Firmware)

Part # 375-3424 Rev. -02 and -03

Intel 80333 9/5/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , SHS: SHA-1Cert#850

"Cryptographic Acceleration Card"

408 MRV Communications
295 Foster St.
Littleton, MA 01460
USA

-Tim Bergeron
TEL: 978-952-5647

LX-Series Algorithm Core

Version 5.3.1 (Firmware)

Freescale PQ1 MPC885 9/5/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 2048 , SHS: SHA-1Cert#848 , SHA-256Cert#848

"The LX-4000T Series Console Servers provide secure remote service serial port access to devices in an organization's networks and infrastructures. This nearly eliminates the need for physical presence at a site to correct problems or manage its everyday operation."

407 Brocade
1745 Technology Drive
San Jose, CA 95110
USA

-Albert Tao
TEL: 408-333-5754

Brocade SP Crypto Library

Version SP_OpenSSL_1.0

Cavium CN3010 w/ Linux 2.6 8/28/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(ver); 1024 , SHS: SHA-1Cert#844

"Brocade OpenSSL RSA implementation."

406 SCsquare Ltd.
2A Habarzel St.
Ramat Hahayal
Tel Aviv, 69710
Israel

-Yossi Fixman
TEL: +972-3-7657-331
FAX: +972-3-6494-975

Apollo OS V4.03 on SLE66CX680PE

Version 4.03 (Firmware)

Part # SLE66CX680PE

Infineon SLE66CX680PE smart card controller IC 8/15/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , SHS: SHA-1Cert#839

"Apollo OS V4.03 on SLE66CX680PE is a multi-purpose smart card utilizing an ISO 7816 file system. Apollo OS V4.03 is implemented as firmware in ROM of an Infineon SLE66CX680PE smart card controller IC."

405 CommVault Systems Inc.
2 Crescent Place
Oceanport, NJ 07746
USA

-Zahid Ilkal
TEL: (732) 870-4812
FAX: (732) 870-4545

-Andrei Erofeev
TEL: (732) 870-4950
FAX: (732) 870-4545

CommVault Crypto Library

Version 1.0

Intel Core2 Duo w/ Microsoft Windows 2003; Intel Core2 Duo w/ Redhat Linux 5.0; UltraSPARC II w/ Sun Solaris 10 8/15/2008 ALG[ANSIX9.31]; Key(gen)(MOD: 1024 , 2048 , 4096 PubKey Values: 65537 ) RNG: Cert# 482

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 2048 , 4096 , SHS: SHA-1Cert#838 , SHA-256Cert#838 , SHA-512Cert#838

"CommVault Crypto Library (CVCL) is a cryptographic software module used in various CommVault products. The module provides key generation, symmetric and asymmetric encryption, hash, HMAC and signature generation/verification services."

404 SPYRUS, Inc.
1860 Hartog Drive
San Jose, CA 95131-2203
USA

-Tom Dickens
TEL: 408-392-4324
FAX: 408-392-0319

-Reid Carlisle
TEL: 727-551-0046
FAX: 408-392-0319

SPYCOS®

Version SPYCOS Series 2 (Firmware)

Infineon SLE66CX642P Security Controller 8/8/2008 ALG[ANSIX9.31]; Key(gen)(MOD: 1024 , 2048 PubKey Values: 3 , 65537 )
RNG: Cert# 481

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 2048 , SHS: SHA-1Cert#834 , SHA-224Cert#834 , SHA-256Cert#834 , SHA-384Cert#834 , SHA-512Cert#834

"The SPYCOS® Series 2 is the latest addition to the SPYRUS family of cryptographic module ICs enabling both smart card and USB cryptographic tokens. It provides security critical capabilities in user authentication, message privacy and integrity, authentication, and secure storage in an IC form factor."

08/15/08: Correction was made to OES';

403 Oberthur Technologies
4250 Pleasant Valley Road
Chantilly, VA 20151
USA

-Christophe Goyet
TEL: 703-263-0100
FAX: 703-263-0503

RSA for ID-One Cosmo v7 N

Version FC10 (Firmware)

Part # B0

ID-Once Cosmo v7.0 N 8/8/2008 ALG[ANSIX9.31]; Key(gen)(MOD: 1024 , 1536 , 2048 PubKey Values: 3 , 17 , 65537 )
RNG: Cert# 480

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , SHS: SHA-1Cert#833 , SHA-256Cert#833 , SHA-384Cert#833 , SHA-512Cert#833

ALG[RSASSA-PSS]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , SHS: SHA-1Cert#833 , SHA-256Cert#833 , SHA-384Cert#833 , SHA-512Cert#833

"The ID-One Cosmo Smart Card Platform is a single chip multi-application cryptographic module that offers a highly secure architecture together with cryptographic services such as 3DES (128,192), AES (128,192,256), RSA (1024, 1536, 2048) with X9.31 onboard key generation, SHA (1,224,256,384,512), ECDSA (GFP,192,224,256,384,521) & Elliptic Curve DH."

PKCS#1 PSS 1024 was not tested for SHA-512;

402 Hewlett-Packard
11445 W. Compaq Center Dr.
Houston, TX 77070
USA

-Rick Sellers
TEL: 281-514-5799

RSASSA-PKCS1-v1_5 signing algorithm with 2048 bit modulus

Version 1.0 (Firmware)

Part # L6B0185

ARM926EJS 8/4/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(ver); 2048

"HP StorageWorks LTO-4 Ultrium 1840 Tape Drive provides mid-market and enterprise customers up to 1.6TB compressed storage capacity per cartridge with built-in AES 256-bit hardware data encryption to provide easy-to-enable security and prevent unauthorized access of encrypted tape cartridges."

401 Hewlett-Packard
11445 W. Compaq Center Dr.
Houston, TX 77070
USA

-Rick Sellers
TEL: 281-514-5799

RSASSA-PKCS1-v1_5 signing algorithm with 2048 bit modulus

Version 1.0 (Firmware)

Part # L6A0185

ARM926EJS 8/4/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(ver); 2048

"HP StorageWorks LTO-4 Ultrium 1840 Tape Drive provides mid-market and enterprise customers up to 1.6TB compressed storage capacity per cartridge with built-in AES 256-bit hardware data encryption to provide easy-to-enable security and prevent unauthorized access of encrypted tape cartridges."

400 Proxim Wireless Corporation
1561 Buckeye Drive
Milpitas, CA 95035
USA

-Cor van de Water
TEL: 408-383-7626
FAX: 408-383-7680

-Gordon Poole
TEL: 408-306-5622

Tsunami MP.11 HS 245054-R and HS 245054-S Cryptographic Implementation

Version 1.0.0 (Firmware)

Freescale MPC8241LVR166D 7/18/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 2048 , 4096 , SHS: SHA-1Cert#826

"Proxim Tsunami MP.11 245054-R and 245054-S wireless products offer fixed and mobile WiMAX capabilities to distribute wireless broadband access supporting video, voice, and data applications. In FIPS mode, the modules support proprietary WORP protocol for wireless transmission and TLS, SSH, and SNMP for management."

399 Aruba Networks, Inc.
1322 Crossman Ave.
Sunnyvale, CA 94089-1113
USA

-Harsha Nagaraja
TEL: 408-754-3010

Aruba Networks Cryptographic Firmware Library

Version 1.1 (Firmware)

RMI-XLR 7/11/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , SHS: SHA-1Cert#823

"Cryptographic Firmware Library provides cryptographic algorithm implementations for purpose built Aruba's Mobility controller. Firmware library provides implementations for TDES, AES, SHA1, HMAC, RSA, and RNG(ANSI X9.31)"

398 Digi International, Inc.
11001 Bren Road East
Minnetonka, MN 55343
USA

-Brian O’Rourke
TEL: (952) 912-3444
FAX: (952) 912-4952

Digi Passport FIPS

Version 1.0 (Firmware)

MPC880VR133 7/11/2008 ALG[ANSIX9.31]; Key(gen)(MOD: 1024 PubKey Values: 3 )
RNG: Cert# 473

ALG[ANSIX9.31]; SIG(gen); SIG(ver); 1024 , SHS: SHA-1Cert#819 , SHA-256Cert#819 , SHA-384Cert#819 , SHA-512Cert#819

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , SHS: SHA-1Cert#819 , SHA-224Cert#819 , SHA-256Cert#819 , SHA-384Cert#819 , SHA-512Cert#819

ALG[RSASSA-PSS]; SIG(gen); SIG(ver); 1024 , SHS: SHA-1Cert#819 , SHA-224Cert#819 , SHA-256Cert#819 , SHA-384Cert#819 , SHA-512Cert#819

"The latest entry in Digi's advanced console management line, the Digi Passport provides secure remote access to the console ports of computer systems and network equipment. In addition to conventional serial console connections, the Digi Passport connects to the service processors of the leading server vendors."

397 Sun Microsystems
4150 Network Circle
Santa Clara, CA 95054
USA

-Mehdi Bonyadi
TEL: 858-625-5163

Sun Cryptographic Accelerator 6000

Version 1.0.10 (Firmware)

Part # 375-3424 Rev. -02 and -03

Intel 80333 7/11/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , SHS: SHA-1Cert#815

"Cryptographic Acceleration Card"

396 Motorola
1301 East Algonquin Road
Schaumburg, IL 60196
N/A

-Kirk Mathews
TEL: 847-576-4101

Motorola Advanced Crypto Engine (MACE) RSA-2048

Part # 5185912Y01

N/A 7/3/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(ver); 2048

""The MACE cryptographic processor is used in security modules embedded in Motorola's Astro (TM) family of radio system products. It provides secure voice and data capabilities as well as APCO Over-The-Air-Rekeying and advanced key management.""

395 Microsoft Corporation
One Microsoft Way
Redmond, WA 98052-6399
USA

-Dave Friant
TEL: 425-704-7984
FAX: 425-936-7329

Windows Server 2003 Enhanced Cryptographic Provider (RSAENH)

Version 5.2.3790.4313

Intel Celeron w/ Windows Server 2003 SP2 (x86); AMD Athlon X2 w/ Windows Server 2003 SP2 (x64); Intel Itanium2 w/ Windows Server 2003 SP2 (IA64) 7/3/2008

ALG[ANSIX9.31]; SIG(gen); 1024 , 1536 , 2048 , 3072 , 4096 , 4096 , SHS: SHA-1Cert#816

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , SHS: SHA-1Cert#816 , SHA-256Cert#816 , SHA-384Cert#816 , SHA-512Cert#816

"The Microsoft Enhanced Cryptographic Provider, designed for FIPS 140-2 compliance, is a software-based, cryptographic module. RSAENH encapsulates several different cryptographic algorithms (including SHS, TDES, AES, RSA, SHS-based HMAC) in a cryptographic module accessible via the Microsoft CryptoAPI."

394 Sun Microsystems
4150 Network Circle
Santa Clara, CA 95054
USA

-Mehdi Bonyadi
TEL: 858-625-5163

Sun Cryptographic Accelerator 6000

Version 1.0.10 (Firmware)

Intel 80333 7/3/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , SHS: SHA-1Cert#815

"Cryptographic Acceleration Card"

393 Kingston Technology Company
17600 Newhope Street
Fountain Valley, CA 92708
USA

-Joel Tang
TEL: (877) 546-4786

Kingston Kingvault

Part # 2231/2232

N/A 7/3/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , SHS: SHA-1Cert#814

"As the world's leading memory manufacturer Kingston offers the marketplace a variety of secure USB devices designed to protect data at rest. By utilizing 256bit AES encryption via the Kingsafe application, the Kingston USB drives offer a high level of security certified to FIPS 140-2 standards. "

392 AJA Video Systems, Inc.
443 Crown Point Circle
Grass Valley, CA 95945
USA

-Andy Witek
TEL: 530-271-3176
FAX: 530-274-9442

ANSI X9.31 RSA

Version 1.0 (Firmware)

Dallas DS5250 7/3/2008

ALG[ANSIX9.31]; SIG(gen); SIG(ver); 2048 , SHS: SHA-1Cert#809

"ANSI X9.31 - 1998 Digital Signatures using Reversible Public Key Cryptography for the Financial Services Industry (rDSA)."

391 Firetide, Inc.
16795 Lark Avenue
Suite 200
n/a
Los Gatos, CA 95032
USA

-Murali Repakula
TEL: 408-355-7203
FAX: 408-399-7756

Firetide Secure Management Interface

Version openssl-fips-1.1.2 (Firmware)

armv5b 7/3/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024

"This is RSA/SHA1 implementations that allow Firetide Digital Certificate based authentication for SSL, SSH, and other system accesses."

390 RSA Security, Inc.
177 Bovet Road, Suite 200
San Mateo, CA 94402
USA

-Kathy Kriese
TEL: 650-931-9781

RSA BSAFE Crypto-C Micro Edition (ME)

Version 3.0

IBM Power3 w/ AIX 5L 5.3 (32-bit); IBM Power3 w/ AIX 5L 5.3 (64-bit); PA-RISC 2.0 w/ HP-UX 11i v1 (32-bit); PA-RISC 2.0W w/HP-UX 11i v2 (64-bit); Intel Itanium2 w/ HP-UX 11i v3 (32-bit); Intel Itanium2 w/ HP-UX 11i v3 (64-bit); Intel Celeron w/ Red Hat Enterprise Linux AS 4.0 (32-bit w/ LSB 3.0.3); Intel AMD Athlon X2 w/ Red Hat Enterprise Linux AS 5.0 (64-bit w/ LSB 3.0.3); SPARC V8 w/ Solaris 10 (32-bit); SPARC V8+ w/ Solaris 10 (32-bit); SPARC V9 w/ Solaris 10 (64-bit); AMD Opteron w/ Solaris 10 (64-bit); PowerPC 603 w/ VxWorks 5.5; PowerPC 604 w/ VxWorks 5.5; PowerPC 604 w/ VxWorks 6.0; Intel PXA250 w/ Windows Mobile 2003; Intel PXA270 w/ Windows Mobile 5; Intel PXA270 w/ Windows Mobile 6.0; AMD Athlon X2 w/ Windows Server 2003 SP2 (64-bit w/ MT Static Wrap); Intel Itanium2 w/ Windows Server 2003 SP2 (64-bit w/ MT Static Wrap); Intel Itanium2 w/ Windows Server 2003 SP2 (w/ MD Dynamic Wrap); Intel Pentium M w/ Windows XP Professional SP2 (w/ MT Static Wrap); AMD Athlon X2 w/ Windows Vista Ultimate (32-bit w/ MD Dynamic Wrap); Intel Pentium D w/ Windows Vista Ultimate (64-bit w/ MD Dynamic Wrap) 7/3/2008 ALG[ANSIX9.31]; Key(gen)(MOD: 1024 , 1536 , 2048 , 3072 , 4096 PubKey Values: 3 , 17 , 65537 )
RNG: Cert# 466

ALG[ANSIX9.31]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , 4096 , SHS: SHA-1Cert#807 , SHA-256Cert#807 , SHA-384Cert#807 , SHA-512Cert#807

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , SHS: SHA-1Cert#807 , SHA-224Cert#807 , SHA-256Cert#807 , SHA-384Cert#807 , SHA-512Cert#807

ALG[RSASSA-PSS]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , SHS: SHA-1Cert#807 , SHA-224Cert#807 , SHA-256Cert#807 , SHA-384Cert#807 , SHA-512Cert#807

"RSA BSAFE® Crypto-C ME software is designed to help protect sensitive data as it is stored using strong encryption techniques to provide a persistent level of protection. The software supports a wide range of industry standard encryption algorithms offering developers the flexibility to choose the appropriate option to meet their requirements."

389 Attachmate Corporation
1500 Dexter Ave N
Seattle, WA 98109
USA

-Diana Agemura
TEL: 206-217-7495
FAX: 206-272-1487

-Scott Rankin
TEL: 206-217-7973
FAX: 206-272-1487

Attachmate Crypto Module

Version 2.0.40

Intel Xeon w/ Red Hat v4 (s390) on Hercules 3.05 on Red Hat v5; IBM s390 w/ SuSE Linux Enterprise Server 9; IBM Power5 w/ AIX 5.2; PA-RISC w/ HP-UX 11.11; Sun Ultra-SPARC w/ Solaris 8; Intel Itanium 2 w/ HP-UX 11i v3; Intel Itanium 2 w/ Red Hat Enterprise Linux v4; Intel Itanium 2 w/ Windows Server 2003 SP2; AMD Opteron w/ Solaris 10; AMD Opteron w/ SuSE Linux Enterprise Server 9.0; AMD Athlon64 x2 w/ Windows Server 2003 SP2; Intel Celeron w/ Solaris 10 (x86); Intel Pentium D w/ Red Hat Enterprise Linux v4; Intel Celeron w/ Windows Server 2003 SP2 7/3/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , SHS: SHA-1Cert#805

388 BigFix, Inc.
1480 64th St.
Suite 200
n/a
Emeryville, CA 94608
USA

-Noah Salzman
TEL: 510-740-0308
FAX: 510-652-6742

-Peter Loer
TEL: 510-740-5158
FAX: 510-652-6742

BigFix Cryptographic Library

Version 1.0

IBM p610 using Power3-II CPU w/ AIX 5L for Power v5.2 Program Number 5765-E62; HP C3000 using 64-bit PA-8500 400 MHz CPU w/ HP-UX 11i; HP XW4100 using Intel Pentium 4 3GHz CPU w/ Red Hat Enterprise Linux 4 Update 2 (32-bit); HP Proliant DL145 G2 using AMD 64 Opteron 2GHz CPU w/ Red Hat Enterprise Linux 4 Update 2 (64-bit); Dell Precision 650 using Dual Xeon 3.0GHz CPU w/ Solaris 10 (x86); Sun Blade 150 using Ultraspace IIe 650MHz CPU w/ Solaris 10 (Sparc); Sun Blade 150 using Ultrasparc IIe 650MHz CPU w/ Solaris 9 (Sparc); IBM eServer 325 using Dual AMD Opteron 2GHz CPU w/ SuSE Linux Enterprise Server v9; Dell Optiplex GX400 using Pentium 4 CPU w/ Windows 2000 Pro SP3; Dell Optiplex GX270 using Pentium 4 CPU w/ Windows 2003 Enterprise Edition SP1; Dell Optiplex GX270 using Pentium 4 CPU w/ Windows XP Pro SP2; Mac OS X: iMac using PowerPC G4 CPU w/ Mac OS X 10.3.6 6/13/2008 ALG[ANSIX9.31]; Key(gen)(MOD: 1024 , 1536 , 2048 , 3072 , 4096 PubKey Values: 3 , 17 , 65537 )
RNG: Cert# 464

ALG[ANSIX9.31]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , 4096 , SHS: SHA-1Cert#804 , SHA-256Cert#804 , SHA-384Cert#804 , SHA-512Cert#804

"The BigFix Cryptogrpahic Module is the software library used to support authentication, validation, and encryption routines for the BigFix 7 Platform."

07/18/08: Add new OES;

387 IBM Corporation
11400 Burnet Road
Austin, TX 78758
USA

-Kevin Driver
TEL: 512-838-1128
FAX: 512-838-8868

IBM Java JCE 140-2 Cryptographic Module

Version 1.3

Intel Pentium 4 w/ Windows XP Professional SP2 with IBM JVM 1.6.0 6/13/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , SHS: SHA-1Cert#803 , SHA-256Cert#803 , SHA-384Cert#803 , SHA-512Cert#803

"The IBM Java JCE (Java Cryptographic Extension) FIPS provider (IBMJCEFIPS) for Multi-platforms is a scalable, multipurpose cryptographic module that supports many FIPS approved cryptographic operations. This gives Java applications access to the FIPS algorithms via the standard JCE framework that is part of all JVM's at the 1.4.0 level and higher."

386 Certicom Corp.
5520 Explorer Drive, 4th Floor
Mississauga, Ontario L4W 5L1
Canada

-Atsushi Yamada
TEL: 905-501-3884
FAX: 905-507-4230

-Rob Williams
TEL: 905-501-3887
FAX: 905-507-4230

Security Builder GSE-J Crypto Core

Version 2.2

Intel Core 2 Duo w/ Windows 2008 Server 64-bit w/ JRE 1.6.0; Intel Pentium III w/ Linux Redhat AS5 32 Bit w/ JRE 1.6.0; Intel Pentium D w/ Redhat Linux AS5 64 bit w/ JRE 1.6.0; Sun UltraSPARC III w/ Solaris 10 32 Bit w/ JRE 1.6.0; Sun UltraSPARC III w/ Solaris 10 64 bit w/ JRE 1.6.0; Intel Pentium D w/ Windows Vista 32 bit w/ JRE 1.6.0; Intel Core 2 Duo w/ Windows Vista 64 bit w/JRE 1.6.0 6/13/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , SHS: SHA-1Cert#802 , SHA-224Cert#802 , SHA-256Cert#802 , SHA-384Cert#802 , SHA-512Cert#802

"Security Builder GSE-J is a standards-based cryptographic toolkit written in Java. It supports optimized Elliptic Curve Cryptography and provides application developers with sophisticated tools to flexibly integrate encryption, digital signatures and other security mechanisms into Java-based applications."

385 Sun Microsystems
4150 Network Circle
Santa Clara, CA 95054
USA

-Mehdi Bonyadi
TEL: 858-625-5163

Sun Cryptographic Accelerator 6000

Version 1.1.1 (Firmware)

Intel 80333 6/9/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , SHS: SHA-1Cert#796

"Cryptographic Acceleration Card"

384 HP Atalla Security Products
19091 Pruneridge Ave.
MS 4441
Cupertino, CA 95014
USA

-Denise Santos
TEL: 408-447-2630
FAX: 408-447-5525

Atalla Cryptographic Engine 006

Version 1.02 (Firmware)

PowerPC 440EPx 6/9/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(ver); 1024 , 4096

"The Atalla Cryptographic Engine 006 (ACE006) is a multiple-chip cryptographic module that provides secure cryptographic processing. The ACE006 features secure key management and storage capabilities, and also provides high performance AES processing. ACE006 is used in the Atalla Secure Print Advantage Series products."

383 Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134
USA

-Mike Soto
TEL: 408-902-8125
FAX: 408-853-3122

Cisco IOS AIM-VPN-II-PLUS

Part # 7814-W

N/A 6/9/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , SHS: SHA-1Cert#794 , SHA-256Cert#794 , SHA-512Cert#794

"The VPN Advanced Integration Module (AIM) for the Cisco 1841 Integrated Services Router and Cisco 2800 and 3800 Series Integrated Services Routers optimizes the Cisco Integrated Services Router platforms for virtual private networks in IP Security (IPSec) VPN deployments. "

382 Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134
USA

-Mike Soto
TEL: 408-902-8125
FAX: 408-853-3122

Cisco IOS AIM-VPN/SSL

Part # 7855, v1.0

N/A 6/9/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , SHS: SHA-1Cert#794 , SHA-256Cert#794 , SHA-512Cert#794

"The VPN Advanced Integration Module (AIM) for the Cisco 1841 Integrated Services Router and Cisco 2800 and 3800 Series Integrated Services Routers optimizes the Cisco Integrated Services Router platforms for virtual private networks in both IP Security (IPSec) and Secure Sockets Layer (SSL) VPN deployments. "

381 Sun Microsystems
4150 Network Circle
Santa Clara, CA 95054
USA

-Mehdi Bonyadi
TEL: 858-625-5163

Sun Cryptographic Accelerator 6000

Version 1.1.1 (Firmware)

Part # 3753424, Rev. -02 and -03

Intel 80333 5/28/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , SHS: SHA-1Cert#796

"Cryptographic acceleration card"

380 ERUCES, Inc.
11142 Thompson Ave.
Lenexa, Kansas 66219
U.S.A.

-Dr. Bassam Khulusi
TEL: (913) 310-0888
FAX: (913) 859-9797

-Oggy Vasic
TEL: (913) 310-0888
FAX: (913) 859-9797

Tricryption Cryptographic Module

Version 7.0

AMD Opteron w/ Red Hat Enterprise Linux 5; Intel Pentium 4 w/ Windows Server 2003 R2; 5/28/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 2048 , 3072 , SHS: SHA-1Cert#795

"Tricryption Cryptographic Module is a software library providing cryptographic services for ERUCES’ Tricryption family of high volume encryption & key management products including key servers, file, database, executables encryption, and special services (anonymization, de-identification, & privacy protection)."

07/17/08: Update implementation information;

379 Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134
USA

-Mike Soto
TEL: 408-902-8125
FAX: 408-853-3122

IOS 12.4 Software Cryptography

Version 12.4(15) T3 (Firmware)

QED RM5261A; 7065C MIPS; Broadcom BCM1125H 5/28/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , SHS: SHA-1Cert#794 , SHA-256Cert#794 , SHA-512Cert#794

"The Cisco 1800, 2800 and 3800 Series of integrated Services Routers intelligently embed data and security into a single, resilient system for fast, scalable delivery of mission-critical business applications from small offices to demanding enterprise environments."

378 Rajant Corporation
400 E King St.
Malvern, PA 19355
USA

-Marty Lamb
TEL: 610-873-6788

ME2 BreadCrumb

Part # ME2 1S2F

N/A 5/22/2008 2048 PubKey Values: 65537
RNG: Cert# 455

"The Rajant BreadCrumb ME2 is a rugged wireless data transmitter-receiver that transparently forms a mesh"

377 Francotyp Postalia GmbH
Triftweg 21-26
Birkenwerder, 16547
Germany

-Hasbi Kabacaoglu
TEL: +49 3303 525 656
FAX: +49 3303 525 07 656

FP CryptoLib - PKCS#1 Verify Engine 1.0

Version 1.08.163 (Firmware)

Samsung S3C44B0X 5/22/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(ver); 1024 , SHS: SHA-1Cert#791

"The firmware implementation of the FP Crypto Library, which runs on an embedded hardware module, with a Samsung S3C44B0X processor. The cryptographic algorithm implementation is used in context of security critical devices."

376 Cisco Systems, Inc.
7025-6 Kit Creek Road
Research Triangle Park, NC 27709
USA

-Chris Romeo
TEL: 919-392-0512

Adaptive Security Appliance OS

Version 7.2.2.27 (Firmware)

Intel Celeron; Intel Pentium 4 5/22/2008 ALG[ANSIX9.31]; Key(gen)(MOD: 1024 , 2048 PubKey Values: 65537 )
RNG: Cert# 454

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 2048 , SHS: SHA-1Cert#790

"The market-leading Cisco PIX and ASA security appliances deliver robust user and application policy enforcement and secure connectivity services in cost-effective, easy-to-deploy solutions. Cisco PIX and ASA security appliances provide comprehensive security, performance, and reliability for network environments of all sizes."

375 Athena Smartcard Inc.
20380 Town Center Lane
Suite 240
Cupertino, CA 95014
USA

-Ian Simmons
TEL: 408-865-0112
FAX: 408-865-0333

Athena IDProtect USB

Version 0106.7130.0207 (Firmware)

Part # AT90SC25672RCT-USB vD

Atmel AT90SC25672RCT-USB 5/22/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 2048 , SHS: SHA-1Cert#789

"Athena Smartcard is a global company offering a wide range of ID products for Government and Enterprise customers: FIPS 140-2 and 201 certified smart card operating systems in a variety of form-factors on various chips, readers, cross-platform cryptographic middleware and innovative biometric and card management solutions."

374 Juniper Networks
One Rogers Street, Sixth Floor
Cambridge, MA 02142
USA

-Robert Smith
TEL: 617-949-4067
FAX: 617-547-1031

OSC/P RSA

Version 2.0

Intel Xeon x86 w/ Windows XP Service Pack 2 5/13/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , SHS: SHA-1Cert#788 , SHA-224Cert#788 , SHA-256Cert#788 , SHA-384Cert#788 , SHA-512Cert#788

"The Odyssey Security Component / Portable (OSC/P) is a general purpose cryptographic library. This portable (C) version can be compiled for use on a large variety of platforms."

07/03/08: Update OES;

373 Juniper Networks
One Rogers Street, Sixth Floor
Cambridge, MA 02142
USA

-Robert Smith
TEL: 617-949-4067
FAX: 617-547-1031

OSC RSA

Version 2.0

Intel Xeon x86 w/ Windows XP Service Pack 2; Intel Pentium 4 w/ Windows 2000 Service Pack 3; 5/13/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , SHS: SHA-1Cert#787 , SHA-224Cert#787 , SHA-256Cert#787 , SHA-384Cert#787 , SHA-512Cert#787

"The Odyssey Security Component (OSC) is a general purpose cryptographic library."

07/03/08: Update OES;
07/29/08: Add new tested OES;

372 Gemalto
Arboretum Plaza II
9442 Captial of Texas Highway North
Suite 400
Austin, TX 78759
USA

-Vincent Prothon
TEL: 512-257-3810
FAX: 512-257-3881

Gemalto GX4-FIPS

Version GX4-FIPS EI08 (Firmware)

NXP P5CD144 5/13/2008 ALG[ANSIX9.31]; Key(gen)(MOD: 1024 , 1536 , 2048 PubKey Values: 3 , 17 , 65537 )
RNG: Cert# 450

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , SHS: SHA-1Cert#786

"This module is based on a Java platform (GemCombiXpresso R4) with 144K EEPROM memory and on the SafesITe FIPS201 applet loaded on the Java Card platform. The Cryptographic Module provides dual interfaces (i.e. contact and contact-less) where the same security level is achieved. Module Ref# A1005963 - Card Ref# M1002255."

371 Microsoft Corporation
One Microsoft Way
Redmond, WA 98052-6399
USA

-Dave Friant
TEL: 425-704-7984
FAX: 425-936-7329

Windows XP Enhanced Cryptographic Provider (RSAENH)

Version 5.1.2600.5507

Intel Pentium D w/ Windows XP Professional SP3 5/13/2008

ALG[ANSIX9.31]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , 4096 , SHS: SHA-1Cert#783

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); 1024 , 1536 , 2048 , 3072 , 4096 , SHS: SHA-1Cert#783 , SHA-256Cert#783 , SHA-384Cert#783 , SHA-512Cert#783

"The Microsoft Enhanced Cryptographic Provider, designed for FIPS 140-2 compliance, is a software-based, cryptographic module. RSAENH encapsulates several different cryptographic algorithms (including SHS, DES, TDES, AES, RSA, HMAC) in a cryptographic module accessible via the Microsoft CryptoAPI."

370 RMI Corporation
18920 Forge Drive
Cupertino, CA 95014
USA

-Mark Litvack
TEL: 408-434-5751
FAX: 408-434-5777

XLS Processor

Part # XLS Series Processors A1

N/A 5/13/2008

ALG[ANSIX9.31]; SIG(gen); SIG(ver); 1024 , SHS: SHA-1Cert#781 , SHA-256Cert#781 , SHA-384Cert#781 , SHA-512Cert#781

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , SHS: SHA-1Cert#781 , SHA-256Cert#781 , SHA-384Cert#781 , SHA-512Cert#781

ALG[RSASSA-PSS]; SIG(gen); SIG(ver); 1024 , SHS: SHA-1Cert#781 , SHA-256Cert#781 , SHA-384Cert#781 , SHA-512Cert#781

"RMI's XLS series devices include the XLS408 and XLS404 processors. The XLS processors combine the power of innovative multi-processing and multi-threaded architecture with the simplicity of a leading edge, general purpose MIPS64-based machine enabling wire speed across multiple platforms."

369 Research in Motion
295 Phillip Street
Waterloo, Ontario N2L 3W8
Canada

-Security Certifications Team
TEL: 519-888-7465 x72921
FAX: 519-886-9852

BlackBerry Cryptographic API

Version 4.5 (Firmware)

Intel PXA901 312MHz processor with BlackBerry OS 4.5 5/7/2008

ALG[ANSIX9.31]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , 4096 , SHS: SHA-1Cert#777 , SHA-256Cert#777 , SHA-384Cert#780 , SHA-512Cert#777

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , SHS: SHA-1Cert#777 , SHA-224Cert#780 , SHA-256Cert#777 , SHA-384Cert#780 , SHA-512Cert#777

ALG[RSASSA-PSS]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , SHS: SHA-1Cert#777 , SHA-224Cert#780 , SHA-256Cert#777 , SHA-384Cert#780 , SHA-512Cert#777

"The BlackBerry Cryptographic API is the firmware module that provides advanced cryptographic functionality to BlackBerry Wireless Handhelds and Smartphones."

Mod 1024 was not tested for PKCS#1 1.5 Signature Verification;

368 HP Atalla Security Products
19091 Pruneridge Ave.
MS 4441
Cupertino, CA 95014
USA

-Denise Santos
TEL: 408-447-2630
FAX: 408-447-5525

Atalla Cryptographic Engine 006

Version 1.00 (Firmware)

PowerPC 440EPx 5/7/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(ver); 1024 , 4096

"The Atalla Cryptographic Engine 006 (ACE006) is a multiple-chip cryptographic module that provides secure cryptographic processing. The ACE006 features secure key management and storage capabilities, and also provides high performance AES processing. ACE006 is used in the Atalla Secure Print Advantage Series products."

367 Research in Motion
295 Phillip Street
Waterloo, Ontario N2L 3W8
Canada

-Security Certifications Team
TEL: 519-888-7465 x72921
FAX: 519-886-9852

BlackBerry Cryptographic Kernel - AES ASM

Version 3.8.5.32a (Firmware)

Intel PXA901 312MHz processor with BlackBerry OS 4.5 5/7/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(ver); 1024 , SHS: SHA-1Cert#777

"The BlackBerry Cryptographic Kernel is the firmware module that provides the core cryptographic functionality to BlackBerry Wireless Handhelds and Smartphones."

366 Optica Technologies Inc.
2051 Dogwood St
Suite 210
n/a
Louisville, CO 80027
USA

-William Colvin
TEL: 905-876-3147
FAX: 905-876-3479

-Gil Fisher
TEL: 720-214-2800 x12
FAX: 720-214-2805

Eclipz ESCON Tape Encryptor Cryptographic Library

Version 1.0 (Firmware)

Intel Xeon processor 4/30/2008 ALG[ANSIX9.31]; Key(gen)(MOD: 1024 , 1536 , 2048 , 3072 , 4096 PubKey Values: 3 , 17 , 65537 )
RNG: Cert# 442

ALG[ANSIX9.31]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , 4096 , SHS: SHA-1Cert#776 , SHA-256Cert#776 , SHA-384Cert#776 , SHA-512Cert#776

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , SHS: SHA-1Cert#776 , SHA-224Cert#776 , SHA-256Cert#776 , SHA-384Cert#776 , SHA-512Cert#776

ALG[RSASSA-PSS]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , SHS: SHA-1Cert#776 , SHA-224Cert#776 , SHA-256Cert#776 , SHA-384Cert#776 , SHA-512Cert#776

"THE ECLIPZ ESCON TAPE ENCRYPTOR IS DESIGNED TO BE INSERTED IN AN ESCON FIBER OPTIC CHANNEL BETWEEN AN IBM MAINFRAME COMPUTER AND A TAPE DRIVE TO ENCRYPT DATA BEING SENT TO THE TAPE DRIVE."

365 Francotyp-Postalia GmbH
Triftweg 21-26
Birkenwerder, 16547
Germany

-Hasbi Kabacaoglu
TEL: +49 3303 525 656
FAX: +49 3303 525 669

-Clemens Heinrich
TEL: +49 3303 525 619
FAX: +49 3303 525 07 619

FP DW Library - PKCS#1 Verify Engine 1.0

Version 1.08.163 (Firmware)

Samsung S3C44B0X 4/30/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(ver); 2048

"The firmware implementation of the FP DW Library, which runs on an embedded hardware module, with a Samsung S3C44B0X processor. The cryptographic algorithm implementation is used in context of security critical services."

364 Broadcom Corporation
1131 W. Warner Rd.
Tempe, AZ 85284
USA

-Gary McCulley
TEL: 480-753-2291
FAX: 480-753-2380

BCM5861

Part # BCM5861 Version A0

N/A 4/18/2008

ALG[ANSIX9.31]; SIG(gen); SIG(ver); 1024 , 2048 , SHS: SHA-1Cert#775

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 2048 , SHS: SHA-1Cert#775

"The BCM5861 is a fully-featured security processor optimized to provide high-performance cryptographic acceleration, as well as IPSec and SSL/TLS protocol processing."

363 BeCrypt Ltd.
Wyvols Court
Swallowfield
Reading, Berkshire RG7 1WY
UK

-Pali Surdhar
TEL: +44 07809391037

-Bernard Parsons
TEL: +44 07809391027

32 bit subcomponent - BeCrypt Crypto Module

Version 1.0

Intel Core 2 w/ Microsoft Windows XP Pro SP2; Intel Core 2 w/ Ubuntu Linux (Version 8.04) 4/9/2008

ALG[ANSIX9.31]; SIG(gen); SIG(ver); 1024 , 2048

"This is the 32 bit subcomponent implementation for the BeCrypt Cryptographic Module."

04/29/08: Add new OES;

362 Chunghwa Telecom Co. Ltd. Telecommunication Labs
12, Lane 551, Min-Tsu Road
SEC.5
n/a
Yang-Mei, Taoyuan,, Taiwan 326
Republic of China

-tulip@cht.com.tw
TEL: +886-3-4245883
FAX: +886-3-4244147

HiPKI SafGuard 1000 Cryptographic Library

Part # EP2C70F672C6N

N/A 4/9/2008 ALG[ANSIX9.31]; Key(gen)(MOD: 1024 , 2048 PubKey Values: 3 , 17 , 65537 )
RNG: Cert# 439

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 2048 , SHS: SHA-1Cert#770 , SHA-224Cert#770 , SHA-256Cert#770 , SHA-384Cert#770 , SHA-512Cert#770

"HiPKI SafGuard 1000 Cryptographic Library provides highly-secure cryptographic services,i dentity-based challenge-response authentication, and key storage for PKI Applications in the HiPKI SafGuard 1000 HSM."

361 RMI Corporation
18920 Forge Drive
Cupertino, CA 95014
USA

-Mark Litvack
TEL: 408-434-5751
FAX: 408-434-5777

XLR Processor

Part # XLR Series Processors C4

N/A 4/9/2008

ALG[ANSIX9.31]; SIG(gen); SIG(ver); 1024 , SHS: SHA-1Cert#769 , SHA-256Cert#769 , SHA-384Cert#769 , SHA-512Cert#769

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , SHS: SHA-1Cert#769 , SHA-256Cert#769 , SHA-384Cert#769 , SHA-512Cert#769

ALG[RSASSA-PSS]; SIG(gen); SIG(ver); 1024 , SHS: SHA-1Cert#769 , SHA-256Cert#769 , SHA-384Cert#769 , SHA-512Cert#769

"RMI's series devices include the XLR732, XLR716, XLR532, XLR516, XLR508, and XLR308 processors. They are the ultimate in performance, combining the power of innovative multi-core and multi-threaded architecture with the simplicity of a leading edge, general purpose MIPS64-based machine."

360 RMI Corporation
18920 Forge Drive
Cupertino, CA 95014
USA

-Mark Litvack
TEL: 408-434-5751
FAX: 408-434-5777

XLR Processor

Part # XLR Series Processors B2

N/A 4/9/2008

ALG[ANSIX9.31]; SIG(gen); SIG(ver); 1024 , SHS: SHA-1Cert#768 , SHA-256Cert#768

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , SHS: SHA-1Cert#768 , SHA-256Cert#768

ALG[RSASSA-PSS]; SIG(gen); SIG(ver); 1024 , SHS: SHA-1Cert#768 , SHA-256Cert#768

"RMI's XLR series devices include the XLR732, XLR716, XLR532, XLR516, XLR508, and XLR308 processors. They are the ultimate in performance, combining the power of innovative multi-core adn multi-threaded architecture with the simplicity of a leading edge, general purpose MIPS64-based machine."

359 Kingston Technology Company
17600 Newhope Street
Fountain Valley, CA 92708
USA

-Mark Akoubian
TEL: 714-438-2719
FAX: 714-427-3598

Kingston Kingsafe Algorithms

Version 4.0 (Firmware)

Phison Electronics PS223x 4/9/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , SHS: SHA-1Cert#767

"As the world's leading memory manufacturer Kingston offers the marketplace a variety of secure USB devices designed to protect data at rest. By utilizing 256bit AES encryption via the Kingsafe application, the Kingston USB drives offer a high level of security certified to FIPS 140-2 standards."

358 Microsoft Corporation
One Microsoft Way
Redmond, WA 98052-6399
USA

-Dave Friant
TEL: 425-704-7984
FAX: 425-936-7329

-Kelvin Yu
TEL: 425-703-4612
FAX: 425-936-7329

Windows Server 2008 CNG algorithms

Version 1.1

Intel Pentium D w/ Windows Server 2008 (x86); Intel Pentium D w/ Windows Server 2008 (x64); Intel Itanium2 w/ Windows Server 2008 (IA64) 4/2/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , SHS: SHA-1Cert#753 , SHA-256Cert#753 , SHA-384Cert#753 , SHA-512Cert#753

ALG[RSASSA-PSS]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , SHS: SHA-1Cert#753 , SHA-256Cert#753 , SHA-384Cert#753 , SHA-512Cert#753

"The Microsoft Windows Cryptographic Primitives Library is a general purpose, software-based, cryptographic module which can be dynamically linked into applications by developers to permit the use of FIPS 140-2 Level 1 compliant cryptography."

357 Microsoft Corporation
One Microsoft Way
Redmond, WA 98052-6399
USA

-Dave Friant
TEL: 425-704-7984
FAX: 425-936-7329

-Kelvin Yu
TEL: 425-703-4612
FAX: 425-936-7329

Windows Vista CNG algorithms

Version 1.1

Intel Pentium D w/ Windows Vista Ultimate SP1 (x86); Intel Pentium D w/ Windows Vista Ultimate SP1 (x64) 4/2/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , SHS: SHA-1Cert#753 , SHA-256Cert#753 , SHA-384Cert#753 , SHA-512Cert#753

ALG[RSASSA-PSS]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , SHS: SHA-1Cert#753 , SHA-256Cert#753 , SHA-384Cert#753 , SHA-512Cert#753

"The Microsoft Windows Cryptographic Primitives Library is a general purpose, software-based, cryptographic module which can be dynamically linked into applications by developers to permit the use of FIPS 140-2 Level 1 compliant cryptography."

356 nCipher Corporation Ltd.
Jupiter House, Station Road
Cambridge, CB1 2JD
United Kingdom

-Marcus Streets
TEL: 011-44-1223-723600
FAX: 011-44-1223-723601

-Mark Wooding
TEL: 011-44-1223-723600
FAX: 011-44-1223-723601

nCipher Algorithm Library

Version 6.0 (Firmware)

Motorola Power PC running a proprietary Operating System 3/27/2008 ALG[ANSIX9.31]; Key(gen)(MOD: 1024 , 1536 , 2048 , 3072 , 4096 PubKey Values: 3 , 17 , 65537 )
RNG: Cert# 436

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , SHS: SHA-1Cert#764 , SHA-224Cert#764 , SHA-256Cert#764 , SHA-384Cert#764 , SHA-512Cert#764

ALG[RSASSA-PSS]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , SHS: SHA-1Cert#764 , SHA-224Cert#764 , SHA-256Cert#764 , SHA-384Cert#764 , SHA-512Cert#764

"The nCipher algorithm library provides cryptographic functionality for nCipher's nShield Hardware Security Modules."

PKCS#1 PSS - SHA512 mod 1024 is not tested for both Signature Generation and Signature Verification;

355 Microsoft Corporation
One Microsoft Way
Redmond, WA 98052-6399
USA

-Dave Friant

-Kelvin Yu

Windows Server 2008 Enhanced Cryptographic Provider (RSAENH)

Version 1.1

Intel Pentium D w/ Windows Server 2008 (x86); Intel Pentium D w/ Windows Server 2008 (x64); Intel Itanium2 w/ Windows Server 2008 (IA64) 3/18/2008

ALG[ANSIX9.31]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , 4096 , SHS: SHA-1Cert#753

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , SHS: SHA-1Cert#753 , SHA-256Cert#753 , SHA-384Cert#753 , SHA-512Cert#753

"The Microsoft Windows Cryptographic Primitives Library is a general purpose, software-based, cryptographic module which can be dynamically linked into applications by developers to permit the use of FIPS 140-2 Level 1 compliant cryptography."

354 Microsoft Corporation
One Microsoft Way
Redmond, WA 98052-6399
USA

-Dave Friant

-Kelvin Yu

Windows Vista Enhanced Cryptographic Provider (RSAENH)

Version 1.1

Intel Pentium D w/ Windows Vista Ultimate SP1 (x86); Intel Pentium D w/ Windows Vista Ultimate SP1 (x64) 3/18/2008

ALG[ANSIX9.31]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , 4096 , SHS: SHA-1Cert#753

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , SHS: SHA-1Cert#753 , SHA-256Cert#753 , SHA-384Cert#753 , SHA-512Cert#753

"The Microsoft Windows Cryptographic Primitives Library is a general purpose, software-based, cryptographic module which can be dynamically linked into applications by developers to permit the use of FIPS 140-2 Level 1 compliant cryptography."

353 Microsoft Corporation
One Microsoft Way
Redmond, WA 98052-6399
USA

-Dave Friant
TEL: 425-704-7984
FAX: 425-936-7329

-Kelvin Yu
TEL: 425-703-4612
FAX: 425-936-7329

Windows Vista and Server 2008 RSA Key Generation Implementation

Version 1.1

Intel Pentium D w/ Windows Vista Ultimate SP1 (x86); Intel Pentium D w/ Windows Vista Ultimate SP1 (x64); Intel Pentium D w/ Windows Server 2008 (x86); Intel Pentium D w/ Windows Server 2008 (x64); Intel Itanium2 w/ Windows Server 2008 (IA64) 3/18/2008 1024 , 1536 , 2048 , 3072 , 4096 PubKey Values: 65537

"The Microsoft Windows Cryptographic Primitives Library is a general purpose, software-based, cryptographic module which can be dynamically linked into applications by developers to permit the use of FIPS 140-2 Level 1 compliant cryptography."

The implementation uses a Vendor-Affirmed SP800-90 implementation;

352 Research in Motion
295 Phillip Street
Waterloo, Ontario N2L 3W8
Canada

-Security Certifications Team
TEL: 519-888-7465 x2921
FAX: 519-886-9852

BlackBerry Cryptographic API

Version 4.3 (Firmware)

Intel PXA901 312MHz processor with BlackBerry OS 4.3 3/18/2008

ALG[ANSIX9.31]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , 4096 , SHS: SHA-1Cert#763 Cert# 751 Cert# 751 , SHA-256Cert#763 Cert# 751 Cert# 752 , SHA-384Cert#763 Cert# 751 Cert# 752 , SHA-512Cert#763 Cert# 751 Cert# 752

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , SHS: SHA-1Cert#763 Cert# 751 Cert# 752 , SHA-224Cert#763 Cert# 751 Cert# 752 , SHA-256Cert#763 Cert# 751 Cert# 752 , SHA-384Cert#763 Cert# 751 Cert# 752 , SHA-512Cert#763 Cert# 751 Cert# 752

ALG[RSASSA-PSS]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , SHS: SHA-1Cert#763 Cert# 751 Cert# 752 , SHA-224Cert#763 Cert# 751 Cert# 752 , SHA-256Cert#763 Cert# 751 Cert# 752 , SHA-384Cert#763 Cert# 751 Cert# 752 , SHA-512Cert#763 Cert# 751 Cert# 752

"The BlackBerry Cryptographic API is the firmware module that provides advanced cryptographic functionality to BlackBerry Wireless Handhelds."

351 Giesecke & Devrient
45925 Horseshoe Drive
Dulles, VA 20166
USA

-Michael Poitner
TEL: 650-312-1241
FAX: 605-312-8129

-Jatin Deshpande
TEL: 650-312-8047
FAX: 650-312-8129

Sm@rtCafé Expert 3.2

Version CPDYxJCRSEFI-025CD144V503 (Firmware)

NXP P5CD144 3/18/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , SHS: SHA-1Cert#761

"Sm@rtCafé Expert 3.2 is a Java Card 2.2.1 and Global Platform v2.1.1 compliant smart card module supporting contact and contactless interfaces. Its support includes RSA up to 2048 bits with key generation, Hash algorithms (including SHA256), SEED, AES, DSA, OAEP Padding and Triple-DES."

350 Giesecke & Devrient
45925 Horseshoe Drive
Dulles, VA 20166
USA

-Michael Poitner
TEL: 650-312-1241
FAX: 605-312-8129

-Jatin Deshpande
TEL: 650-312-8047
FAX: 650-312-8129

Sm@rtCafé Expert 3.2

Version CPDIxJCRSEFI-025CD080V402 (Firmware)

NXP P5CD080 3/18/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , SHS: SHA-1Cert#760

"Sm@rtCafé Expert 3.2 is a Java Card 2.2.1 and Global Platform v2.1.1 compliant smart card module supporting contact and contactless interfaces. Its support includes RSA up to 2048 bits with key generation, Hash algorithms (including SHA256), SEED, AES, DSA, OAEP Padding and Triple-DES."

349 Giesecke & Devrient
45925 Horseshoe Drive
Dulles, VA 20166
USA

-Michael Poitner
TEL: 650-312-1241
FAX: 605-312-8129

-Jatin Deshpande
TEL: 650-312-8047
FAX: 650-312-8129

Sm@rtCafé Expert 3.2

Version CPDHxJCRSEFI-025CC073V202 (Firmware)

NXP P5CC073 3/18/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , SHS: SHA-1Cert#759

"Sm@rtCafé Expert 3.2 is a Java Card 2.2.1 and Global Platform v2.1.1 compliant smart card module supporting contact and contactless interfaces. Its support includes RSA up to 2048 bits with key generation, Hash algorithms (including SHA256), SEED, AES, DSA, OAEP Padding and Triple-DES."

348 Silicon Graphics Inc.
2750 Blue Water Road
Eagan, MN 55121
USA

-Lori Gilbertson
TEL: 1-651-683-3433

SGI Alitx with RHEL5 Update 1 on Intel Xeon EM64T

Version openssl0.9.8b-8.3.el5_0.2

Intel Xeon EM64T w/ Red Hat Enterprise Linux 5 Update 1 3/18/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , SHS: SHA-1Cert#757

"TDES, AES, SHA-1, and RSA as used and provided by RHEL5 U1 on SGI Altix XE Servers (200 series and 300 series)"

347 Silicon Graphics Inc.
2750 Blue Water Road
Eagan, MN 55121
USA

-Lori Gilbertson
TEL: 1-651-683-3433

SGI Alitx with RHEL5 Update 1 on Intel Itanium2

Version openssl0.9.8b-8.3.el5_0.2

Intel Itanium2 w/ Red Hat Enterprise Linux 5 Update 1 3/18/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , SHS: SHA-1Cert#756

"TDES, AES, SHA-1, and RSA as used and provided by RHEL5 U1 on SGI Altix 400 series and 4000 series"

346 AudioCodes
1 Hayarden St.
Airport St., Lod 70151
Israel

-Yair Elharrar
TEL: +972-3-9764055
FAX: +972-3-9764223

OpenSSL 0.9.8d RSA

Version 0.9.8d

Freescale (MPC8xx/MPC82xx) w/ pSOS+ 2.5 3/18/2008 ALG[ANSIX9.31]; Key(gen)(MOD: 1024 , 2048 PubKey Values: 65537 )
RNG: Cert# 430

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 2048 , SHS: SHA-1Cert#754

"Voice-over-IP media gateway"

345 Research in Motion
295 Phillip Street
Waterloo, Ontario N2L 3W8
Canada

-Security Certifications Team
TEL: 519-888-7465 x2921
FAX: 519-886-9852

BlackBerry Cryptographic Kernel

Version 3.8.5 B (Firmware)

Intel PXA901 3/3/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(ver); 1024 , SHS: SHA-1Cert#752

"The BlackBerry Cryptographic Kernel is the firmware module that provides the core cryptographic functionality to BlackBerry Wireless Handhelds."

344 Research in Motion
295 Phillip Street
Waterloo, Ontario N2L 3W8
Canada

-Security Certifications Team
TEL: 519-888-7465 x2921
FAX: 519-886-9852

BlackBerry Cryptographic Kernel

Version 3.8.5 C (Firmware)

Intel PXA901 3/3/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(ver); 1024 , SHS: SHA-1Cert#751

"The BlackBerry Cryptographic Kernel is the firmware module that provides the core cryptographic functionality to BlackBerry Wireless Handhelds."

343 VIACK Corporation
16701 NE 80th St., Suite 100
Redmond, WA 98052
USA

-Peter Eng
TEL: 425-605-7400
FAX: 425-605-7405

VIA3 VkCrypt Cryptographic Module RSA

Version 6.0

Intel x86 w/ Windows Vista; Intel x86 w/ Windows XP 3/3/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , SHS: SHA-1Cert#750

"The VIA3 VkCrypt Cryptographic Module is a software cryptographic module that implements symmetric and public key encryption, digital signatures, and hashing. VIA3 is a secure online collaboration solution integrating real-time audio and video, instant messaging, application sharing, and access to workspaces."

342 Brocade Communications Systems, Inc.
1600 Technology Drive
San Jose, CA 95110
USA

-Vidya Renganarayanan
TEL: 408-333-5812

Brocade FIPS Crypto Library

Version FIPS_OpenSSL_1.0 (Firmware)

PowerPC 440GX; PowerPC 8548 3/3/2008 ALG[ANSIX9.31]; Key(gen)(MOD: 1024 PubKey Values: 65537 )
RNG: Cert# 426

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , SHS: SHA-1Cert#749

"RSA implementation in Brocade firmware."

341 Motorola, Inc.
6480 Via Del Oro
San Jose, CA 95199
USA

-Zeljko Bajic
TEL: 408-528-2684
FAX: 408-528-2400

-Gopalakrishnan Kamatchi
TEL: 408-528-2427
FAX: 408-528-2400

Core crypto library

Version 1.0 (Firmware)

Intel Pentium; RMI-XLR 2/21/2008 ALG[ANSIX9.31]; Key(gen)(MOD: 1024 , 1536 , 2048 , 3072 PubKey Values: 3 , 17 , 65537 )
RNG: Cert# 424

ALG[ANSIX9.31]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , 4096 , SHS: SHA-1Cert#745 , SHA-256Cert#745 , SHA-384Cert#745 , SHA-512Cert#745

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , SHS: SHA-1Cert#745 , SHA-224Cert#745 , SHA-256Cert#745 , SHA-384Cert#745 , SHA-512Cert#745

ALG[RSASSA-PSS]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , SHS: SHA-1Cert#745 , SHA-224Cert#745 , SHA-256Cert#745 , SHA-384Cert#745 , SHA-512Cert#745

"RFS7000/ WS5100 wireless switches from Motorola provide enhanced support for enterprise mobility and multimedia applications, as well as security and manageability. Switches are based on Motorola’s Wi-NG (Wireless Next Generation) architecture providing support: for a large number of 802.11 a/b/g Access Ports/Points for L2/L3 adoption and mobility; campus wide roaming across subnets, powerful failover capabilities; integrated security features including IPSec VPN gateway and secure guest access."

340 Senetas Security Pty Ltd
Level 1 / 11 Queens Road
Melbourne, VIC 3004
Australia

-Horst Marcinsky
TEL: +61 3 9868 4555
FAX: +61 3 9821 4899

-Colin Campbell
TEL: +61 3 9868 4555
FAX: +61 3 9821 4899

CypherNET Crypto Library

Version 0.9.7 (Firmware)

Motorola Freescale MPC8280 (PPC32) 2/21/2008 ALG[ANSIX9.31]; Key(gen)(MOD: 1024 , 2048 , 4096 PubKey Values: 65537 )
RNG: Cert# 422

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 2048 , 4096 , SHS: SHA-1Cert#743 , SHA-256Cert#743 , SHA-512Cert#743

"Senetas Security's CypherNET™ Crypto library provides FIPS 140-2 approved cryptographic algorithms for the CypherNET family of products. Based on OpenSSL, the CypherNET Crypto library provides an Application Programming Interface (API) to support security relevant services within the CypherNET 1000 and 3000 Series products."

04/04/08: Add rested SHA-256;

339 Nortel Networks
600 Technology Park
Billerica, MA 01821
USA

-Dave Norton
TEL: 978-288-7079

-Dragan Grebovich
TEL: 978-288-8069
FAX: 978-670-8153

Nortel VPN Router Cryptographic Implementation

Version 7_05.100

Intel Celeron w/ VxWorks 5.3.1; Intel Pentium III w/ VxWorks 5.3.1; Intel Xeon w/ VxWorks 5.3.1 2/21/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 2048 , SHS: SHA-1Cert#739

"Nortel VPN Routers provide routing, VPN, firewall, bandwidth management, encryption, authentication, and data integrity for secure connectivity across managed networks and the Internet. They connect remote users, branch offices, suppliers, and customers with cost and performance advantages of public networks and security/control of private networks"

338 Nortel Networks
600 Technology Park
Billerica, MA 01821
USA

-Dave Norton
TEL: 978-288-7079

-Dragan Grebovich
TEL: 978-288-8069
FAX: 978-670-8153

Nortel VPN Router OpenSSL Implementation

Version 7_05.100

Intel Celeron w/ VxWorks 5.3.1; Intel Pentium III w/ VxWorks 5.3.1; VxWorks 5.3.1 w/ VxWorks 5.3.1 2/21/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , SHS: SHA-1Cert#738

"It is OpenSSL 9.8d based, modified to meet FIPS 140-2 requirements. Nortel VPN Routers provide routing, VPN, firewall, bandwidth management, encryption, authentication, and data integrity for secure connectivity across managed IP networks and the Internet."

337 Cavium Networks
805 E. Middlefield Road
Mountain View, CA 94043
USA

-Y. J. Kim
TEL: 650-623-7076
FAX: 650-625-9751

RSA for OCTEON CN3000 Series Die

Part # CN3000, Version 1.1

N/A 2/21/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , SHS: SHA-1Cert#645

"OCTEON CN30XX - SCP family of single core MIPS64 processors targets intelligent networking, control plane, storage and wireless applications. This processor family includes part numbers CN3005SCP and CN3010SCP. CPU integrates security HW acceleration including AES-GCM, SHA-2 (up to SHA-512)."

336 Cavium Networks
805 E. Middlefield Road
Mountain View, CA 94043
USA

-Y. J. Kim
TEL: 650-623-7076
FAX: 650-625-9751

RSA for OCTEON CN3100 Series Die

Part # CN3100, Version 1.1

N/A 2/21/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , SHS: SHA-1Cert#646

"OCTEON CN31XX - SCP, NSP family of single and multi-core MIPS64 processors targets intelligent networking, control plane, storage and wireless applications. This processor family with security includes part numbers CN3020SCP, CN3110SCP, CN3110NSP, CN3120SCP and CN3120NSP."

335 Cavium Networks
805 E. Middlefield Road
Mountain View, CA 94043
USA

-Y. J. Kim
TEL: 650-623-7076
FAX: 650-625-9751

RSA for OCTEON CN3600/CN3800 Series Die

Part # CN3600/CN3800 Version 3.1

N/A 2/21/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , 3072 , 4096 , SHS: SHA-1Cert#647

"OCTEON CN36XX/38XX - SCP, NSP family of multi-core MIPS64 processors targets intelligent networking, control plane, storage and wireless applications. This processor family with security includes part numbers CN3630SCP, CN3630NSP, CN3830SCP, CN3830NSP, CN3840SCP, CN3840NSP, CN3850SCP, CN3850NSP, CN3860SCP, CN3860NSP."

334 Sun Microsystems, Inc.
1 Storage Tek Drive
MS ULVL4-274
Louisville, CO 80028
USA

-Alexander Stewart
TEL: 303-661-2775
FAX: 303-661-5743

RSASSA-PKCS1-v1_5

Version 1.0 (Firmware)

ARM926EJ 2/21/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(ver); 2048 , SHS: SHA-1Cert#736

"The Sun T10000 Encrypting Tape Drive uses the SHA-1 hashing function as required by the TLS Communication protocol, RSASSA-PKCS1-v1_5, and for protection of user names and passwords. The Sun T10000 Encrypting Tape Drive uses RSASSA-PKCS1-v1_5 for firmware image signature verification."

333 Nokia Enterprise Solutions
102 Corporate Park Dr.
White Plains, NY 10604
USA

-Jeff Ward
TEL: 781 993 4679

Nokia NGX R65 Implementation

Version NGX (R65) HFA-02 (Firmware)

Intel Core 2 Xeon Quad Core; Intel Core Xeon LV Dual Core 2/21/2008 ALG[ANSIX9.31]; Key(gen)(MOD: 1024 , 2048 , 4096 PubKey Values: 3 , 17 , 65537 )
RNG: Cert# 418

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 2048 , 4096 , SHS: SHA-1Cert#735

"Check Point's VPN-1 module running on Nokia's IPSO security hardened operating system "

332 Nokia Enterprise Solutions
102 Corporate Park Dr.
White Plains, NY 10604
USA

-Jeffrey Ward
TEL: 781 993 4679

Nokia IPSO Implementation

Version 4.2 (Firmware)

Intel Core 2 Xeon Quad Core; Intel Core Xeon LV Dual Core 2/21/2008 ALG[ANSIX9.31]; Key(gen)(MOD: 1024 , 1536 , 2048 , 3072 , 4096 PubKey Values: 3 , 17 , 65537 )
RNG: Cert# 417

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 2048 , 4096 , SHS: SHA-1Cert#734

"Nokia security hardened operating system"

331 SonicWALL, Inc.
1143 Borregas Ave.
Sunnyvale, CA 94089-1306
USA

-Usha Sanagala
TEL: 408-962-6248

SonicOS 5.0.1 for NSA E7500

Version 5.0.1

Cavium OCTEON CN3860 NSP w/ SonicOS Version 5.0.1 1/30/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , SHS: SHA-1Cert#733

"The SonicWALL E-Class Network Security Appliance (NSA) E7500 is engineered to meet the needs of the expanding enterprise network by providing a high performance, scalable, multifunction threat prevention appliance."

330 SonicWALL, Inc.
1143 Borregas Ave.
Sunnyvale, CA 94089-1306
USA

-Usha Sanagala
TEL: 408-962-6248

SonicOS 5.0.1 for NSA E6500

Version 5.0.1

Cavium OCTEON CN3860 SCP w/ SonicOS Version 5.0.1 1/30/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , SHS: SHA-1Cert#732

"The SonicWALL E-Class Network Security Appliance (NSA) E6500 is engineered to meet the needs of the expanding enterprise network by providing a high performance, scalable, multifunction threat prevention appliance."

329 SonicWALL, Inc.
1143 Borregas Ave.
Sunnyvale, CA 94089-1306
USA

-Usha Sanagala
TEL: 408-962-6248

SonicOS 5.0.1 for NSA 4500/5000/E5500

Version 5.0.1

Cavium OCTEON CN3840 SCP w/ SonicOS Version 5.0.1 1/30/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , SHS: SHA-1Cert#731

"SonicWALL's E-Class Network Security Appliance (NSA) Series are multi-core Unified Threat Management appliances that combine a powerful deep packet inspection firewall with layers of protection technology and a suite of high-availability features making it the ideal choice for campus networks, data centers and more."

328 SonicWALL, Inc.
1143 Borregas Ave.
Sunnyvale, CA 94089-1306
USA

-Usha Sanagala
TEL: 408-962-6248

SonicOS 5.0.1 for NSA 3500

Version 5.0.1

Cavium OCTEON CN3830 SCP w/ SonicOS Version 5.0.1 1/30/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , SHS: SHA-1Cert#730

"The SonicWALL NSA 3500 is a next generation United Threat Management firewall, utilizing a breakthrough multi-core hardware design with 4 cores and 6 GE interfaces to deliver real-time internal and external network protection without compromising network performance for corporate, branch office and distributed environments."

327 SonicWALL, Inc.
1143 Borregas Ave.
Sunnyvale, CA 94089-1306
USA

-Usha Sanagala
TEL: 408-962-6248

SonicOS 5.0.1 for TZ Series

Version 5.0.1

MIPS Processor Nitrox CN 210 w/ SonicOS Version 5.0.1 1/30/2008

ALG[RSASSA-PKCS1_V1_5]; SIG(gen); SIG(ver); 1024 , 1536 , 2048 , SHS: SHA-1Cert#729

"SonicWALL's TZ Series is a network security platform that combines a deep packet inspection firewall, anti-virus, anti-spyware, intrusion prevention, content filtering, 56k modem backup, and 802.11 b/g WLAN, which allow small and branch offices to implement protection against the wide spectrum of emerging network threats."

32